diff --git a/.github/workflows/sign-release.yml b/.github/workflows/sign-release.yml
index 1b43ecd..4fa9ca1 100644
--- a/.github/workflows/sign-release.yml
+++ b/.github/workflows/sign-release.yml
@@ -34,7 +34,7 @@ jobs:
           upload-signing-artifacts: true
       - name: Verify Signature
         if: always()
-        uses: sigstore/gh-action-sigstore-python@v3.0.0
+        uses: sigstore/gh-action-sigstore-python@300d3393a8effd58cc9e99f701c7c7238fb517d2
         with:
           inputs: feldman_vss.py README.md LICENSE pyproject.toml
           verify: true